Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?
Amazon ALB Vulnerability: 15,000 Apps at Risk of Sneaky Sidestep!
AWS Application Load Balancer users, your security might be hanging by a thread! Miggo’s Liad Eliyahu reveals that up to 15,000 apps could be exposed to the “ALBeast” vulnerability, allowing attackers to sidestep access controls and compromise applications. Amazon has updated its documentation, but will…
Hot Take:
Amazon Web Services’ Application Load Balancer (ALB) just found itself in the hot seat, courtesy of a configuration flaw that’s as inviting to hackers as an all-you-can-eat buffet. Think of it as an “ALBeast” snacking on your security protocols!
Key Points:
- 15,000 applications using AWS ALB for authentication are at risk.
- The vulnerability, dubbed “ALBeast,” was discovered by Israeli firm Miggo.
- Attackers can forge ALB-signed tokens to bypass authentication and authorization.
- Amazon has updated its documentation and added new code to mitigate the issue.
- Misconfigured Microsoft Exchange servers also open doors for email spoofing attacks.
Already a member? Log in here